Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[5.0] Terminate ssl on haproxy (bsc#1149535) #2347

Open
wants to merge 2 commits into
base: stable/5.0-pike
Choose a base branch
from
Open

[5.0] Terminate ssl on haproxy (bsc#1149535) #2347

wants to merge 2 commits into from

Commits on Mar 27, 2020

  1. Terminate nova ssl on haproxy (bsc#1149535) 

    If ssl is passed-thru on haproxy, the source ip gets replaced with
the one of the node where haproxy lives, and there is no way to get the
original ip on the services side.

Add ssl termination on haproxy. Two new hidden options are added:
loadbalancer_terminate_ssl (boolean) and pemfile (path to the
certificate to use in haproxy-recognized format).

(cherry picked from commit 94fc788)
    Boris Bobrov committed Mar 27, 2020
    Configuration menu
    Copy the full SHA
    75df3da View commit details
    Browse the repository at this point in the history

  2. Terminate ssl on haproxy for cinder (bsc#1149535) 

    If ssl is passed-thru on haproxy, the source ip gets replaced with
the one of the node where haproxy lives, and there is no way to get the
original ip on the services side.

Add ssl termination on haproxy. Two new hidden options are added:
loadbalancer_terminate_ssl (boolean) and pemfile (path to the
certificate to use in haproxy-recognized format).

This patch adds support for cinder.

(cherry picked from commit 44e0f6a)
    Boris Bobrov committed Mar 27, 2020
    Configuration menu
    Copy the full SHA
    fd1427a View commit details
    Browse the repository at this point in the history